Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File:                     6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier:          O0dI71lbab9yOuFUJAeAoJUIFgDyvb/tUA5UfirosBM=
Subject key identifier:   85:08:58:26:6D:1B:54:D1:DE:91:07:63:8E:E5:58:7A:43:B2:09:F8
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer:       /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial:       0198925A03D8392F9032125E8E75E262FA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number:          1625
Signing time:             Sun 10 Aug 2025 05:00:29 +0000
Manifest this update:     Sun 10 Aug 2025 05:00:29 +0000
Manifest next update:     Mon 11 Aug 2025 05:00:29 +0000
Files and hashes:         1: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: f0bCYP6MKhBp3eXNF6s9DSb6f4D2mSAXUcA+hSGkqvQ=)
                          2: yQp3lf1OVxhMQ-si3fJCgBiD3so.roa (hash: 2hMAD2c5ISOXJtDVu0nTlgQQryv7G6wnTPw6jHWepts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:5a:03:d8:39:2f:90:32:12:5e:8e:75:e2:62:fa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
        Validity
            Not Before: Aug 10 05:00:29 2025 GMT
            Not After : Aug 11 05:00:29 2025 GMT
        Subject: CN=850858266d1b54d1de9107638ee5587a43b209f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:22:d9:c2:0c:2c:b5:ce:6f:32:2a:69:f2:
                    01:da:e4:5a:b8:3a:db:b5:86:06:17:c1:71:a7:99:
                    87:c8:4b:9d:f4:b3:e3:f3:59:25:20:40:75:59:40:
                    59:3b:41:58:f3:6c:ed:07:d4:8f:e4:b8:82:3f:b2:
                    3c:e9:3a:b4:31:bb:70:b1:04:80:1b:71:ef:e2:a4:
                    a0:7b:fa:16:1b:da:99:84:68:3c:cb:b0:79:98:15:
                    21:a7:03:8d:9c:15:9f:d6:63:4e:5d:be:15:9b:ee:
                    dd:b3:28:7e:cd:0e:79:6b:63:4d:8b:78:25:3e:81:
                    2e:13:1b:16:3d:6e:73:66:b2:c0:de:65:ff:a5:61:
                    65:64:e0:49:d4:48:79:e5:15:f4:ba:96:89:7b:e1:
                    9a:32:96:ad:7b:a7:59:d8:cb:7a:83:86:19:8f:23:
                    ee:ad:f2:cd:d8:a6:41:de:aa:74:42:3a:59:81:c1:
                    4e:dc:4d:d3:c5:7c:67:9b:7e:90:fa:a3:4c:bb:bc:
                    40:0a:de:2e:a2:f5:6f:0e:d8:c0:08:78:cb:78:c1:
                    4f:d8:26:d1:83:86:65:79:3a:29:31:5f:0b:2c:2b:
                    53:10:65:57:29:34:30:00:c6:2a:5a:76:3a:e3:5d:
                    9b:1b:5d:9e:c2:9c:cd:94:e6:6b:2b:74:16:58:9b:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:08:58:26:6D:1B:54:D1:DE:91:07:63:8E:E5:58:7A:43:B2:09:F8
            X509v3 Authority Key Identifier:
                keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:da:22:5d:d5:11:96:cf:d4:83:71:26:c6:9f:cc:4a:14:
         5f:c8:77:ce:c3:fd:34:9f:f5:10:f5:ed:c0:53:54:d8:de:93:
         55:64:3b:87:d8:04:02:2c:c7:e5:27:52:a0:aa:66:f8:71:07:
         9e:20:c5:49:81:b7:b3:c4:de:1a:bb:f0:7d:e9:b4:a3:38:dc:
         7a:74:89:d3:37:ca:88:ab:3b:f5:44:e1:47:13:f1:29:28:ee:
         20:5d:06:63:9b:01:79:6d:08:a0:5b:c5:f4:6e:4b:51:58:87:
         63:73:73:10:c4:d2:c5:60:9d:66:ac:5b:54:50:22:c3:7c:f0:
         de:13:ff:85:2f:74:8b:78:d1:a0:4f:e1:e2:32:ed:4d:69:9c:
         3b:be:49:3f:bc:9a:a0:84:ff:a1:ba:60:71:3a:ee:ce:ed:06:
         2a:c3:75:93:40:89:e3:b6:da:7f:5e:43:10:cd:98:d1:d3:ab:
         8a:44:3b:d9:ff:6e:77:d9:28:ac:9f:f5:7c:29:3a:a5:15:9f:
         6c:b4:79:a2:eb:78:1a:34:60:19:10:4a:3f:21:90:90:3a:1b:
         73:9e:da:7c:56:98:2f:76:5d:8b:97:c9:d2:1a:11:8d:53:fd:
         24:e9:30:c5:db:4a:2e:1b:fd:5e:5a:8d:b5:25:80:83:be:8d:
         cd:0b:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:20 2025 by rpki-client